CVE-2018-7271: Metinfo

High severity, CVSS 8.1. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the config/config_db.php configuration file filtering is not rigorous: one can insert malicious code in the installation process to execute arbitrary commands or obtain a web shell.

Affected products

• Metinfo Metinfo: version 6.0.0 only

Published 2018-02-21. Last modified 2026-06-17.